Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
File: i42FmAZNtajts6YIQGTNKhrYxuM.mft (raw, json)
Hash identifier: FgB+0PMB+CBzHKD4MduKQE8BPK9AJ2I3kqJOlSniJKQ=
Subject key identifier: BF:2E:09:B6:26:12:FB:FF:E2:AA:4B:CC:89:7F:70:E3:13:EE:CD:7C
Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Certificate issuer: /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Certificate serial: 0196CFBDF81FFD53951A97C6486DFD6AFD44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
Manifest number: 0AAA
Signing time: Wed 14 May 2025 17:00:55 +0000
Manifest this update: Wed 14 May 2025 17:00:55 +0000
Manifest next update: Thu 15 May 2025 17:00:55 +0000
Files and hashes: 1: 18pU9OUJZfEjtQtM3d6KCEE-wf4.roa (hash: g9Yx6RdVIwFFC/gP3XLwi8dipV0AyWlMkba67EAqwI4=)
2: f2nWyu3vigJSlBOetOrjZwH1G1A.roa (hash: UMryrqtW8NDhWGWT0rJw80JqEFYALJXz4j6oSIXBhd4=)
3: i42FmAZNtajts6YIQGTNKhrYxuM.crl (hash: DaVRjNzOcqfHHkcxWJ2VZB/AJUlcvfGNXNlUU5GNBzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:bd:f8:1f:fd:53:95:1a:97:c6:48:6d:fd:6a:fd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Validity
Not Before: May 14 17:00:55 2025 GMT
Not After : May 15 17:00:55 2025 GMT
Subject: CN=bf2e09b62612fbffe2aa4bcc897f70e313eecd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f1:04:7c:b6:c1:55:61:ff:88:90:85:e3:49:
ad:74:da:e4:0e:53:95:b1:58:f5:69:5e:40:86:ee:
28:66:44:9a:62:a8:ea:92:ab:c7:46:ca:8d:16:e0:
25:a9:08:9f:f4:cb:61:66:6e:26:9e:a9:2b:54:5a:
ca:1c:cb:93:96:b3:61:9a:04:01:d1:24:8e:45:1c:
35:af:50:90:7c:f8:5c:2a:78:97:7c:95:23:bf:86:
95:77:b7:6c:e7:44:a6:d1:40:9f:d3:e2:47:5d:e2:
8c:61:8b:66:66:ff:80:8f:32:b8:29:32:47:7b:e7:
2e:4d:a0:38:8b:a5:28:44:c6:1f:2f:0c:b9:84:46:
45:c8:93:5c:71:ec:17:bf:5e:cc:3c:20:5c:ab:24:
28:b6:af:e4:57:a2:91:dd:44:de:f9:4a:63:f3:ed:
de:ab:cc:a5:4b:f2:4c:1a:78:60:03:62:c3:8d:c3:
88:be:f8:60:9a:70:e4:3e:96:21:43:84:70:8e:39:
3b:1d:f2:e1:cc:11:39:b2:27:ed:32:b3:7b:e5:bc:
d8:d5:4a:d9:c2:84:91:1b:2b:3d:5e:93:ff:7a:87:
09:71:19:dc:57:a2:41:74:8c:cd:29:7e:89:af:b4:
ad:9c:ca:f8:e7:14:38:3d:1d:64:f2:c0:7c:81:a0:
00:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2E:09:B6:26:12:FB:FF:E2:AA:4B:CC:89:7F:70:E3:13:EE:CD:7C
X509v3 Authority Key Identifier:
keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:17:b9:82:f4:84:31:15:17:5b:c4:d0:26:6d:53:2b:e1:77:
6b:e0:1a:d3:bc:a0:54:97:16:a2:09:b8:36:1d:c5:f0:7e:b9:
d9:76:32:95:3d:3e:1a:fa:c6:67:a9:16:ad:ef:ed:cf:1f:c6:
c4:a0:9d:31:27:9e:79:58:1b:cb:bb:28:a2:77:96:ab:36:63:
3a:1c:e8:b8:80:3f:1d:3b:1f:60:d5:fb:64:09:75:39:50:aa:
89:92:74:29:4a:8c:79:42:79:37:b6:93:8d:c3:5b:8b:11:a8:
6f:47:6c:09:48:82:4a:cc:ce:2b:95:f7:76:98:e1:eb:34:83:
09:dd:98:26:58:e9:7b:c9:61:a2:de:d3:12:d9:70:40:1e:62:
12:0d:2a:ce:80:32:5b:bd:62:4c:ce:4d:36:70:a7:36:cc:af:
87:2c:f1:48:be:fb:eb:b5:46:fc:bd:5c:ca:8f:51:e0:03:dd:
72:64:9d:89:eb:7c:35:73:e0:3f:26:c6:81:05:30:8c:6e:e0:
29:48:bc:06:11:a7:60:5c:d8:d4:b5:29:0b:a1:01:3c:c0:94:
62:86:40:1c:5e:be:52:8f:36:25:60:29:e4:1e:be:9b:ed:88:
66:b6:6b:f3:3f:55:f9:3d:76:d0:34:db:19:ca:f6:3c:f3:6a:
09:84:dd:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbPvfgf/VOVGpfGSG39av1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOGQ4NTk4MDY0ZGI1YThlZGIzYTYwODQwNjRjZDJhMWFk
OGM2ZTMwHhcNMjUwNTE0MTcwMDU1WhcNMjUwNTE1MTcwMDU1WjAzMTEwLwYDVQQD
EyhiZjJlMDliNjI2MTJmYmZmZTJhYTRiY2M4OTdmNzBlMzEzZWVjZDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfEEfLbBVWH/iJCF40mtdNrkDlOV
sVj1aV5Ahu4oZkSaYqjqkqvHRsqNFuAlqQif9MthZm4mnqkrVFrKHMuTlrNhmgQB
0SSORRw1r1CQfPhcKniXfJUjv4aVd7ds50Sm0UCf0+JHXeKMYYtmZv+AjzK4KTJH
e+cuTaA4i6UoRMYfLwy5hEZFyJNccewXv17MPCBcqyQotq/kV6KR3UTe+Upj8+3e
q8ylS/JMGnhgA2LDjcOIvvhgmnDkPpYhQ4Rwjjk7HfLhzBE5siftMrN75bzY1UrZ
woSRGys9XpP/eocJcRncV6JBdIzNKX6Jr7StnMr45xQ4PR1k8sB8gaAApQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8uCbYmEvv/4qpLzIl/cOMT7s18MB8GA1UdIwQY
MBaAFIuNhZgGTbWo7bOmCEBkzSoa2MbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTQyRm1BWk50YWp0czZZSVFHVE5LaHJZeHVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MjNlOWMtNDQyNS00OTZlLWIyMzct
NmIwZWY5MTA4Njg4LzEvaTQyRm1BWk50YWp0czZZSVFHVE5LaHJZeHVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MjNlOWMtNDQyNS00OTZlLWIyMzctNmIwZWY5MTA4Njg4
LzEvaTQyRm1BWk50YWp0czZZSVFHVE5LaHJZeHVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhe5gvSE
MRUXW8TQJm1TK+F3a+Aa07ygVJcWogm4Nh3F8H652XYylT0+GvrGZ6kWre/tzx/G
xKCdMSeeeVgby7sooneWqzZjOhzouIA/HTsfYNX7ZAl1OVCqiZJ0KUqMeUJ5N7aT
jcNbixGob0dsCUiCSszOK5X3dpjh6zSDCd2YJljpe8lhot7TEtlwQB5iEg0qzoAy
W71iTM5NNnCnNsyvhyzxSL7767VG/L1cyo9R4APdcmSdiet8NXPgPybGgQUwjG7g
KUi8BhGnYFzY1LUpC6EBPMCUYoZAHF6+Uo82JWAp5B6+m+2IZrZr8z9V+T120DTb
Gcr2PPNqCYTdmw==
-----END CERTIFICATE-----
Generated at Thu May 15 03:53:26 2025 by rpki-client